SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-t…

SillyTavern, a locally installed user interface for interacting with AI models, contains a path traversal vulnerability in versions prior to 1.17.0. The vulnerability exists in chat endpoints and allows authenticated attackers to read and delete arbitrary files under the user data root directory by manipulating the avatar_url parameter with directory traversal sequences. Sensitive files like secrets.json and settings.json are at risk. The issue affects users who have SillyTavern installed locally and has been patched in version 1.17.0.